EIP-2026-106510

This exploit leverages a directory traversal vulnerability in DokuWiki's dwpage.php script and an arbitrary file write via the X-FORWARDED-FOR header to inject a PHP shell into config.php, enabling remote command execution. It requires register_argc_argv to be enabled on the target server.